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REMARKS 

Please reconsider the application in view of the above amendments and the following 
remarks. Applicant thanks the Examiner for carefully considering this application. 

Disposition of Claims 

Claims 1-29 are currently pending in this application. Claims 1, 9, 16, and 24 are 
independent. The remaining claims depend, directly or indirectly, from claims 1,9, 16, and 24. 

Claim Amendments 

The independent claims have been amended to clarify that the relationship between 
resources determined by comparing the resource names results in one resource being a sub- 
resource of the other resource. That is, when two resource names are compared, the relationship 
that is determined between the two resources is that one of the two resources is a sub-resource of 
the other of the two resources. No new matter is added by way of these amendments. Support 
for these amendments may be found, for example, on page 1 9 of the Specification. 

Rejections under 35 U.S.C. § 103 

Claims 1, 3, 4, 8, 9, 11, 15, 16, 18, 19, and 23 stand rejected under 35 U.S.C. 103(a) as 
being unpatentable over U.S. Publication No. 2002/0186238 ("Sylor") in view of European 
Patent Application EP1009130A1 ("Brun"). To the extent that this rejection may still apply to 
the amended claims, this rejection is respectfully traversed. 

The claimed invention relates to determining whether a particular resource is associated 
with an access control policy using a hierarchical organization that organizes resources based on 
the resource names. Specifically, when access to a particular resource is requested, the resource 
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name is looked up in the hierarchical organization and it is determined whether the resource 
name is associated with an access control policy. Once the resource name is located, the access 
control policy associated with the resource can be retrieved and the request can be evaluated 
against the access control policy to determine whether to grant access to the resource. 

The hierarchical organization includes a top-level resource name (i.e., a root resource 
name) and one or more sub-resource names (i.e., children resource names), where each sub- 
resource name is placed in the hierarchical organization based on common portions of the sub- 
resource name with the top-level resource name. That is, resource names are compared to 
determine which resources are sub-resources of a parent resource, where the comparison is based 
solely on the resource names (see Specification, Figure 4 and accompanying text). 

Turning to the rejection of the claims, to establish a prima facie case of obviousness 
"[fjirst, there must be some suggestion or motivation, either in the references themselves or in 
the knowledge generally available to one of ordinary skill in the art, to modify the reference or to 
combine reference teachings. Second, there must be a reasonable expectation of success. 
Finally, the prior art reference (or references when combined) must teach or suggest all the claim 
limitations." (See MPEP §2143.03). Further, "all words in a claim must be considered in 
judging the patentability of that claim against the prior art." (See MPEP §2143.03). The 
Applicant respectfully asserts that the references, when combined, fail to teach or suggest all the 
claim limitations of amended independent claim 1 . 

Specifically, the Examiner admits that Sylor fails to disclose or suggest that the names of 
two resources are compared to identify a relationship between the two resources, and that the 
hierarchical organization comprises a top-level resource name and several sub-resource names 
corresponding to the top-level resource name (see Office Action mailed April 11, 2006, page 3). 

8 



Application No.: 10/608,881 Docket No.: 03226/497001; P9016 

It also follows that Sylor cannot disclose that the relationship identified between the two 
resources indicates that one of the two resources is a sub-resource of the other of the two 
resources. The Examiner relies on Brun to disclose the aforementioned limitations of the 
claimed invention. 

However, Brun fails to disclose or suggest that the comparison between resource prefixes 
determines that one resource is a sub-resource of the other resource. Brun discloses "comparing 
the resource identifier prefix with the prefixes stored in an access border node directory 
database" (see Brun, col. 8, 11. 44-48). However, comparing resource identifier prefixes is not 
equivalent to determining a relationship between the resources. In fact, Brun does not disclose 
that the comparison between resource identifier prefixes results in any type of relationship 
between the resources, where the relationship is subsequently used to organize the resources in a 
hierarchical structure. 

The Examiner asserts that the resource identifier type, which discloses an addressing 
scheme such as network service access point (NSAP) and E.164, is equivalent to the hierarchical 
structure recited in the present claims. Even assuming arguendo that this is correct, Brun fails to 
disclose or suggest that the comparison of resource name prefixes results in one resource being a 
sub-resource of the other, and further that the sub-resource is placed in the NSAP hierarchical 
structure according to the relationship of the sub-resource and the parent resource (top-level 
resource). In fact, Brun only discloses that the resource identifier prefix (i.e., the NSAP 
addressing scheme) is used to group together users with the same resource identifier type (see 
Brun, col. 15, 11. 46-57). Brun fails to disclose or suggest that this grouping based on resource 
identifier prefixes results in one user being in a sub-group of another resource. In fact, grouping 
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together users as disclosed in Brun is completely distinct from identifying a relationship between 
two resource names such that one resource is a sub-resource of the other resource. 

As further evidence of the Applicant's position, the portion of Brun that discussing 
comparing resource names is in a completely disjoint area of the Brun specification than the area 
that discusses the NSAP and similar address schemes. The comparison in Brun has nothing to 
do with the addressing schemes disclosing in Brun, and therefore, cannot possibly place 
resources amongst which a resource/sub-resource relationship is identified within the 
hierarchical structure of the NSAP or similar addressing scheme. One skilled in the art can 
appreciate that the comparison and the NSAP addressing scheme disclosing in Brun are 
completely unrelated, and relating them would require the Examiner to read the claim limitations 
of the present invention overly broadly or mischaracterize the prior art. Furthermore, the 
Examiner relies on one line {i.e., the line that disclosing NSAP and E.164) in Brun that 
disclosing any type of hierarchical organizational structure. This is hardly enough support for 
disclosing that the comparison of resource names identifies a relationship of resource and sub- 
resource and subsequently places the resources within the hierarchical structure based on the 
identified relationship of resource and sub-resource. 

In view of the above, it is clear that independent claim 1 is patentable over Sylor and 
Brun, whether considered separately or in combination. Further, independent claims 9 and 16 
have been amended to include similar allowable subject matter and are patentable over Sylor and 
Brun for at least the same reasons as independent claim 1. Dependent claims 3, 4, 8, 1 1, 15, 18, 
19, and 23 are patentable for at least the same reasons. Accordingly, withdrawal of this rejection 
is respectfully requested. 
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Claims 2, 10, and 17, and 24 stand rejected under 35 U.S. C. 103(a) as being unpatentable 
over Sylor, in view of Brun, and further in view of U.S. Patent Publication No. 2004/0213258 
("Ramamoorthy"). To the extent that this rejection may still apply to the amended claims, this 
rejection is respectfully traversed. 

As described above, Sylor and Brun fail to render the amended independent claims 1, 9, 
and 16 obvious. Independent claim 24 has been amended to recite similar subject matter as 
independent claims 1, 9, and 16. Therefore, independent claim 24 is patentable over Sylor and 
Brun for the same reasons described above. Further, Ramamoorthy fails to supply that which 
Sylor and Brun lack, as evidenced by the fact that the Examiner relies on Ramamoorthy solely 
for the purpose of disclosing that resources are associated with access policies and that 
requestors are inherently checked for access privileges (see Office Action mailed April 11, 2006, 
page 6). 

Thus, it is clear that Sylor, Brun, and Ramamoorthy, whether considered separately or in 
combination, fail to render independent claims 1, 9, 16, and 24 obvious. Dependent claims 2, 
10, and 17 are patentable for at least the same reasons. Accordingly, withdrawal of this rejection 
is respectfully requested. 

Claims 5, 6, 12, 13, 20, 21, 25, and 26 stand rejected under 35 U.S.C. 103(a) as being 
unpatentable over Sylor in view of Brun, and further in view of U.S. Publication No. 
2004/0128615 ("Carmel"). To the extent that this rejection may still apply to the amended 
claims, this rejection is respectfully traversed. 

As described above, Sylor and Brun fail to render amended independent claims 1,9, 16, 
and 24 obvious. Further, Carmel fails to supply that which Sylor, Brun, and Loucks lack, as 



11 



Application No.: 10/608,881 Docket No.: 03226/497001; P9016 

evidenced by the fact that the Examiner relies on Carmel solely for the purpose of disclosing 
indexing and querying documents, where context delimiters are used for both indexing and 
querying into documents, and for disclosing receiving information for wildcard pattern matching 
of resource names (see Office Action mailed April 11, 2006, page 7). Thus, it is clear that Sylor, 
Brun, and Carmel, whether considered separately or in combination, fail to render independent 
claims 1, 9, 16, and 24 obvious. Dependent claims 5, 6, 12, 13, 20, 21, 25, and 26 are patentable 
for at least the same reasons. Accordingly, withdrawal of this rejection is respectfully requested. 

Claims 7, 14, 22, and 27 stand rejected under 35 U.S.C. 103(a) as being unpatentable 
over Sylor, Brun, and U.S. Patent No. 6,026,440 ("Shrader"). To the extent that this rejection 
may still apply to the amended claims, this rejection is respectfully traversed. 

As described above, Sylor and Brun fail to render amended independent claims 1, 9, 16, 
and 24 obvious. Further, Shrader fails to supply that which Sylor and Brun lack, as evidenced 
by the fact that the Examiner relies on Shrader solely for the purpose of disclosing receiving 
information indicating whether a resource name is case-sensitive (see Office Action mailed April 
11,2006, page 8). 

Thus, it is clear that Sylor, Brun, and Shrader, whether considered separately or in 
combination, fail to render independent claims 1, 9, 16, and 24 obvious. Dependent claims 7, 
14, 22, and 27 are patentable for at least the same reasons. Accordingly, withdrawal of this 
rejection is respectfully requested. 

Claim 28 stands rejected under 35 U.S.C. 103(a) as being unpatentable over Sylor in 
view of Brun and further in view of Ramamoorthy and U.S. Patent No. 5,544,322 ("Cheng"). 
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To the extent that this rejection may still apply to the amended claims, this rejection is 
respectfully traversed. 

As described above, Sylor, Brun, and Ramamoorthy fail to render amended independent 
claim 1 obvious. Further, Cheng fails to supply that which Sylor, Brun, and Ramamoorthy lack, 
as evidenced by the fact that the Examiner relies on Cheng solely for the purpose of disclosing 
referring a request for access to a resource to another policy decision point {see Office Action 
mailed April 11, 2006, page 9). Further, Cheng fails to disclose or suggest a policy decision 
point that is capable of evaluating policy decisions regarding access to the resource. Rather, 
Cheng discloses that the policy decision is forwarded to a database {i.e., which cannot make a 
determination regarding authentication for web server resources) {see Cheng, col. 6, 11. 55-59). 
The database disclosed in Cheng basically processes an authentication announcement, but does 
not work for general web server resources that do not perform authentication announcements. 

Thus, it is clear that Sylor, Brun, Ramamoorthy, and Cheng, whether considered 
separately or in combination, fail to render independent claim 1 obvious. Dependent claim 28 is 
patentable for at least the same reasons. Accordingly, withdrawal of this rejection is respectfully 
requested. 

Referring to claim 29, the Examiner takes Official Notice that a cache for subsequent 
requests/processes is notoriously well know in the art {see Office Action mailed April 1 1 , 2006, 
page 9). Applicant respectfully disagrees with the Examiner's assertion and requests that the 
Examiner provide evidence to support this position either in the form of prior art or by providing 
a declaration of personal knowledge pursuant to 37 C.F.R. 1.104 (d) (2). Particularly, while 
caching requests and processes is well known in the art, the present invention relates to caching 
policy decisions related to access control of resources. By caching policy decisions that are 
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obtained by locating the resource in the hierarchical organization, the need to traverse the 
hierarchical organization is eliminated, thereby making the process of access control for a 
particular resource quicker. Applicant respectfully asserts that caching of such policy decisions, 
made by policy decision points for controlling access to resources is not well known in the art. 
Accordingly, favorable consideration of dependent claim 29 is respectfully requested. 



Applicant believes this reply is fully responsive to all outstanding issues and places this 
application in condition for allowance. If this belief is incorrect, or other issues arise, the 
Examiner is encouraged to contact the undersigned or his associates at the telephone number 
listed below. Please apply any charges not covered, or any credits, to Deposit Account 50-0591 
(Reference Number 03226/497001). 

Dated: July 7, 2006 Respectfully submitted, s\ 
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